RSS   Vulnerabilities for 'Fips object module'   RSS

2007-12-01
 
CVE-2007-5502

CWE-310
 

 
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.

 

 >>> Vendor: Openssl 2 Products
Openssl
Fips object module


Copyright 2024, cxsecurity.com

 

Back to Top